Managing Multiple Sites' Firewalls with Templates - No Override

[Andrew_Laeddis]

Hi,

I'm trying to create an appliance template with firewall rules that can be applied to a number of new sites being onboarded into SD WAN.

I would like to manage the template centrally, and be able to push new rules to all sites. I would also like site-specific firewall rules to be applied to sites individually.

This doesn't seem possible, and it looks like I'll have to do this by cloning a "template" network, and then managing each site individually. Is this correct?

Thanks, 

[alemabrahao · Accepted solution]

If you want to apply individually on each site yes. But maybe (I'm not sure) you can use group policies to achieve It. I will confirm it.

[alemabrahao]

I just confirmed It, and you cannot apply group policy individually on each site, justo on the template.

[Andrew_Laeddis]

Thanks, I didn't know templates were this limited. Hopefully it's possible to add specific L3 rules at each site in future, while using templates. For any updates to the "template configuration", looks like we're in the position where each firewall is going to have to be manually updated with the same rule, because many sites need specific rules.